This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231362e302f32322d3234203d3e20313338393638.roa
File:                     3130332e3131382e3231362e302f32322d3234203d3e20313338393638.roa (raw, json)
Hash identifier:          uZRK3+iJKjoGX9tQ6Pd10IY2xlwvONnP6Y7WcGM0qto=
Subject key identifier:   36:46:6F:FE:68:FD:C0:AD:6E:2C:C0:2D:10:2D:E2:CB:B7:B8:DB:89
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       50235D6BF9143C65225CC33A126680E4EFA3B1EB
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231362e302f32322d3234203d3e20313338393638.roa
Signing time:             Tue 20 Jan 2026 02:09:35 +0000
ROA not before:           Tue 20 Jan 2026 02:04:35 +0000
ROA not after:            Tue 19 Jan 2027 02:09:35 +0000
asID:                     138968
IP address blocks:        103.118.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:23:5d:6b:f9:14:3c:65:22:5c:c3:3a:12:66:80:e4:ef:a3:b1:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jan 20 02:04:35 2026 GMT
            Not After : Jan 19 02:09:35 2027 GMT
        Subject: CN=36466FFE68FDC0AD6E2CC02D102DE2CBB7B8DB89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:27:73:cc:21:10:bd:b6:18:c4:90:89:2d:91:
                    1b:8b:fe:42:28:71:07:b7:57:28:7a:24:56:df:42:
                    02:2c:68:27:a7:05:86:7c:4a:2e:0a:ff:7a:9c:21:
                    b8:04:46:67:01:d6:df:f9:35:4c:40:ff:f0:8b:be:
                    02:d0:d0:2e:e5:3d:73:a7:92:d7:9b:ed:1e:bf:2e:
                    05:3d:3b:e3:ac:ba:29:cc:78:54:96:26:6b:91:fe:
                    fd:e6:05:50:54:84:e5:60:05:6f:41:97:47:1d:ec:
                    52:ba:08:dc:6e:47:be:26:16:aa:d8:92:e1:0b:4f:
                    79:30:ee:20:04:3f:3c:2d:2d:89:77:4c:dc:7a:88:
                    f7:79:7a:55:49:14:f5:44:2b:18:d5:58:bd:99:3d:
                    13:76:dd:9a:07:73:ff:d2:ba:64:d2:c3:5e:87:54:
                    b9:6c:f0:f2:bb:11:33:58:66:46:aa:47:f1:4b:b2:
                    30:a6:b5:e6:7f:af:eb:19:ec:f9:3d:ec:b7:c5:16:
                    b8:17:bc:bc:81:80:66:00:34:6a:0e:84:f4:75:f1:
                    85:93:58:45:1f:9b:40:7b:70:55:b2:f8:9a:66:57:
                    1f:34:0b:f7:71:65:c4:c5:4b:c4:a4:54:c7:7c:c5:
                    f5:b6:8e:14:01:c8:fc:00:c0:4f:6b:68:ad:cd:72:
                    3f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:46:6F:FE:68:FD:C0:AD:6E:2C:C0:2D:10:2D:E2:CB:B7:B8:DB:89
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231362e302f32322d3234203d3e20313338393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:e4:16:ad:19:7c:5f:d9:6c:64:a8:b9:c2:59:18:5c:bd:0e:
         a8:36:36:51:9e:8f:1c:53:02:5c:eb:3f:4e:53:57:8c:5c:1d:
         35:d7:51:55:50:0b:43:d5:2d:53:36:ea:93:12:8a:79:d3:3e:
         a9:fb:42:5a:a8:e2:99:51:6c:c2:cd:36:44:1a:92:26:47:63:
         28:9c:89:cc:f5:52:b6:e6:c1:9d:50:63:23:5b:5a:b3:ab:58:
         15:77:2d:30:36:64:53:ee:5a:74:64:61:6a:b3:f9:85:cd:85:
         f5:51:0c:4c:5a:58:24:d6:95:52:01:83:9f:6d:97:60:c6:fd:
         af:11:33:b2:64:f8:65:4e:c0:39:e3:c0:f4:a5:55:d1:bc:ab:
         82:db:e9:7d:6c:bf:41:8b:32:14:3f:da:12:9d:f9:7c:d2:ff:
         53:ba:a7:47:84:4e:19:f9:4e:ad:97:c7:d6:96:62:8d:85:59:
         5a:75:4a:53:2c:f8:9b:bf:54:61:2e:07:7b:55:87:af:f9:a2:
         1d:46:6c:93:bb:0f:de:43:63:1d:64:b0:51:fb:1a:31:5d:1d:
         f4:62:57:fc:cd:12:88:31:32:38:0c:5d:58:9b:1f:c3:6b:7d:
         39:02:79:bb:a1:6b:19:41:0d:18:f9:09:c1:b4:1f:05:d3:f8:
         6e:05:f0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:10:13 2026 by rpki-client